SuSE 10 Security Update : MySQL (ZYPP Patch Number 6446)

the COMCREATEDB and COMDROPDB suffered from format string vulnerabilities. CVE-2009-2446 - the command line client was prone to cross-site scripting XSS attacks. CVE-2008-4456 Additionally a problem that sometimes prevented slave hosts from reconnecting to the master server has been fixed...

CVE-2006-6446

creationtimestamp| type| source ---|---|--- 2009-03-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8305...

CVE-2008-6446

The CVE concerns CMS MAXSITE’s Guestbook component where the message parameter enables static code injection, allowing remote PHP code execution. Affected: Guestbook functionality in MAXSITE (CMS). Root cause: insufficient input handling in the Guestbook message field leading to code execution. D...

CVE-2008-6446

creationtimestamp| type| source ---|---|--- 2008-12-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7322...

CVE-2007-6446

CVE-2007-6446 is a duplicate of CVE-2007-6118 and not an active entry.

CVE-2007-6446

...

CVE-2006-6446

SQL injection vulnerability in index.php in iWare Professional 5.0.4, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the D parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-6446

CVE-2006-6446 describes an SQL injection vulnerability in index.php of iWare Professional 5.0.4, triggered when magic_quotes_gpc is disabled. An attacker can remotely execute arbitrary SQL commands via the D parameter. The entry notes the provenance as third‑party information and provides CVSS 2....